Magdeburg University Hospital
€9,000
Insufficient fulfilment of data breach notification obligations
Decision Date
January 1, 2023
Authority
Data Protection Authority of Sachsen-Anhalt
DE
Sector
Health Care
Country
DE
Law
GDPRStatus
FINALDescription
The DPA of Sachsen-Anhalt has imposed a fine of EUR 9,000 on Magdeburg University Hospital. The clinic had failed to report to the DPA a data breach involving a former employee having unlawfully disclosed personal data from the clinic's systems to third parties.
Legal Citations
Art. 33
Issues & Violations
Insufficient fulfilment of data breach notification obligations